Managing access across the diner, the real estate brokerage (Maison Pawli) and the leather workshop requires something secure but accessible. Bitwarden or 1Password are my go-to recommendations, because they offer excellent organization without the bloated enterprise costs. The leather workshop is Marcellino NY, which has been my own business since 2010, and the diner is the Heritage Diner, the family restaurant where I work. I have no financial interest in Bitwarden or 1Password, and neither company has paid for this.

1Password vs Bitwarden | Thorough BEST password managers comparison!, Cybernews on YouTube

Why a business needs more than a good memory

Brass padlock on a weathered wooden shop door

A business accumulates logins the way a kitchen accumulates small tools. The website has one, the email has one, the payment processor has one, the shipping account has one, the social accounts each have their own, and a surprising number of them belong to a person who set them up three years ago and has since forgotten how. Most of the time none of this matters. It matters on the day somebody is out sick and the thing they alone could open needs opening.

A password manager is the drawer where all the keys hang on labeled hooks, with a lock on the drawer. The argument for one is not mainly about security in the sense of defense against strangers, though that is part of it. The argument is about access: who can get into what, how fast, and what happens to that access when a person leaves.

For a shop with more than one business under the same roof, the argument is louder. Each business has its own accounts and its own people, and the question of who sees what is a different question for each.

Two names and what each company says

I give two names, Bitwarden and 1Password, because they solve the same problem in somewhat different ways, and a shop’s own habits decide which way suits it better.

Bitwarden

Bitwarden’s pricing page lays out its plans in two groups. For individuals there is a free plan described as always free, a Premium plan and a Families plan. For organizations there are Teams and Enterprise, plus a custom arrangement for large organizations. The page says every account includes open-source security and zero-knowledge encryption. The paid organization plans add things the free ones lack, such as centralized management, event-log auditing and directory sync.

The company’s open-source page says its source code is hosted on GitHub, where anyone can review and audit it, and that it works with third parties such as Cure53 on regular security audits and penetration testing. That is the company’s own account of its audits, and I have not read the audit reports.

The help page on organizations explains the sharing model. An organization relates users and vault items so they can be shared securely, and its administrators work from an Admin Console. Items go into collections, which the page compares to shared folders, and it says common ways to organize them are by department, area of responsibility or function. Groups of members can be given or refused access to a collection in bulk.

1Password

1Password’s features page says it uses “end-to-end encryption, ensuring that only you can access your private information,” that its security starts with AES 256-bit encryption, and that each person has an account password plus a Secret Key. It describes encrypted vaults that can be created, named and organized without a stated limit, and says passwords can be shared by giving coworkers access to individual vaults, or by sending an item through an expiring link, even to someone who does not use 1Password.

The business pricing page describes two business offerings. A Teams Starter Pack is aimed at small teams and covers core sharing, security alerts and role-based permissions. The Business plan adds shared vaults with granular permissions, identity-provider integrations, admin controls with custom groups, Watchtower alerts for weak or exposed passwords, activity reporting, guest accounts and account recovery for locked-out users.

I left the prices out. Both companies’ prices and plan sizes change, and the pages above are the place to read the current ones.

Organization is what a small shop pays for

Back-room office desk with a binder, pen and lamp and one drawer open

I say Bitwarden and 1Password offer excellent organization, and that is the reason I recommend them. In both products, organization means the same thing underneath: a shared place for logins, split into groups, with permissions on each group.

For a person who runs several businesses, one reasonable arrangement would be one group for each business, so that the people at the diner see the diner’s logins, the people at the brokerage see theirs, and the workshop’s stay in the workshop. I am describing a setup the sources make possible. I am not describing the one I run.

What goes into the shared place is wider than passwords. Bitwarden’s help page says shared items cover logins, notes, cards and identities, and 1Password calls its vaults the place for login credentials and other private data. In a shop, that means the wireless router’s admin login, the alarm company’s account number and the registrar’s recovery code can hang on the same hook as the website password. Those are the items that tend to live on a sticky note inside a drawer, which is a system with one copy and no backup.

The reason to split the logins by business is plain. The fewer logins a person can reach, the less there is to lose when a laptop goes missing or a person moves on. And when someone does leave, a group is easier to close than a list of forty accounts is to rebuild.

What “bloated enterprise” means in a pricing structure

The phrase “bloated enterprise costs” is about cost, and the plan structures show what it means. Both companies sell large-organization tiers with features a small shop is unlikely to need: single sign-on, directory sync, custom policies, event streaming into security tools, developer tools such as command-line access and software kits. Bitwarden’s Enterprise plan lists SSO, enterprise policies and self-hosting, and 1Password’s Business plan lists identity-provider integrations, SIEM event streaming and developer tools.

A shop with a handful of people has little use for any of that, and the plan structures let it stop short of those tiers. Bitwarden has a free individual plan and a Teams plan below Enterprise. 1Password has a Teams Starter Pack below Business.

The honest turn against my recommendation is that neither tier is free in every respect. Bitwarden’s free plan puts a small ceiling on how many people can share, and the help page says the same of its free organization. For anyone beyond that, the shop pays per person. Whether that is cheap depends on the size of the team, and I am not printing a number I could not date.

The single point of failure

Workshop pegboard with leather tools each hung in its own outline

A password manager puts the keys in one drawer, and that drawer needs a key. If the master password is lost or the account is locked, the whole set goes with it. 1Password’s business page lists account recovery for locked-out users among the Business plan’s capabilities, and its features page describes the Secret Key that sits alongside the account password. I have not tested either, and I do not claim to know how any recovery process works in practice.

Whatever the product, treat the master credential the way a restaurant treats the safe combination. At least two trusted people should know it or know where it is written, and it should be written down somewhere other than the computer it unlocks. The business email address on the account matters too, since a recovery message goes to it. The post on choosing a domain and business email covers why that address should belong to the business and not to one person.

Choosing between them

The choice is closer than a review wants to admit. If a shop cares most that the code can be inspected and that a free plan exists to start on, Bitwarden is built around that, according to its own pages. If a shop wants a more guided business plan with vaults and a starter pack for small teams, 1Password describes exactly that. Both do the job I care about, which is to keep the keys organized and reachable by the right people.

Trial runs are cheap, and the comparison video above is one way to see both interfaces before spending an afternoon on either. I have not watched it end to end, so I cannot tell you what it concludes. Set up a handful of real logins in each product, share one of them with a second person, and see which of the two asks you fewer questions. The product that gets used is the product that protects the business, and a more capable tool that nobody opens protects nothing.

A few questions settle it:

  • How many people need access, and to how many separate groups of accounts?
  • Does anyone need to share a login with an outsider for a short time? Both companies describe a way to do it.
  • Who will be the person in charge of adding and removing people? A tool without an owner decays.

For informational purposes only. Security products and prices change, and this post does not assess any company’s security record, so read each vendor’s current documentation, and consult a qualified IT security professional if the business handles customer payment or personal data.

Sources